I am trying to lock down a user so that the only thing they can use is
the icon on their desktop and nothign else.

I have so far been unable to prevent them from accessing a couple of
things, and would appreciate any help in locking these down.

The first thing I can still see when I click on the Start button is
the Printers And Faxes which allows me to then add a printer and
change the properties of the existing ones.

I can also us the My Computer icon, adn although I can't see any
drives, from here I can gain access to My Network Places, which allows
me to View Network connections. From there I can mess about with the
network settings. Is there something I can do that will prevent htis
accoutn from even seeing the network connections?

Finally, through the printers and faxes, I can add a scanner using the
wizard. Can I close this too?

Cheers

Andrew H

You may start by removing administrator permissions from regular user
accounts. This will not disable any interface options, however, this will
tighten security much better. Of course, you can remove many desktop icons
and start menu icons such as My Network Places etc with the group policy.

--
Dmitry Korolyov [(E-Mail Removed)]
MVP: Windows Server - Active Directory


<(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
I am trying to lock down a user so that the only thing they can use is
the icon on their desktop and nothign else.

I have so far been unable to prevent them from accessing a couple of
things, and would appreciate any help in locking these down.

The first thing I can still see when I click on the Start button is
the Printers And Faxes which allows me to then add a printer and
change the properties of the existing ones.

I can also us the My Computer icon, adn although I can't see any
drives, from here I can gain access to My Network Places, which allows
me to View Network connections. From there I can mess about with the
network settings. Is there something I can do that will prevent htis
accoutn from even seeing the network connections?

Finally, through the printers and faxes, I can add a scanner using the
wizard. Can I close this too?

Cheers

Andrew H